Privacy Policy
The short version
Seedkeep stores the seed-packet inventory you enter, syncs it across the devices in your household, and contributes scanned packets to a shared catalog so the next person who scans the same packet doesn't have to re-extract it. That's it — no analytics, no advertising IDs, no third-party SDKs, no data sold or shared with anyone else.
What we collect
- Apple Sign-in identifier (subject claim) — lets you sign in across devices. We never receive your email or name from Apple unless you choose to share them on first sign-in. Stored on our server.
- Seed inventory you enter — names, varieties, packet counts, locations, tags, notes, year packed, and state (active / wishlist / saved / archived). Stored on our server so it syncs to your other devices and household members.
- Seed-packet photos — when you scan a packet, the front-and-back photos are uploaded to our object storage so they can serve other households scanning the same packet. You can disable this in Settings → Privacy if you'd rather keep your packets private.
- Server logs — like any web service, our server records IP addresses and request timestamps for the standard ~30-day window. We use these only to diagnose problems and detect abuse; they're not used for tracking or analytics.
What we don't collect
- We don't use analytics, telemetry, crash reporters, advertising IDs, or fingerprinting.
- We don't embed third-party SDKs.
- We don't read your contacts, calendars, location, microphone, or camera roll — only the photos you explicitly take inside the app for seed packets.
- We don't sell, rent, or trade any data with anyone.
- We don't use your data to train AI models.
AI extraction
Seedkeep offers three ways to extract packet info from photos:
- Free (on-device) — Apple Intelligence runs Vision OCR and Foundation Models on your device. Nothing leaves your phone for extraction. The structured result is then synced like any other seed entry.
- BYOK (your own key) — you provide an Anthropic or OpenAI API key. The extraction call goes directly from your phone to that provider. Your key lives in your device's Keychain and is never sent to us. Anthropic and OpenAI's privacy practices govern what they do with the request.
- Hosted — (paid tier, not yet available in v1) we run extraction on our server using our own API key, billed via Apple's In-App Purchase. When this launches we'll update this policy to disclose what data the call carries.
Shared catalog
When you scan a packet, Seedkeep checks whether the same packet has been scanned before. If yes, you get an instant match — the catalog entry already exists. If no, your scan creates the catalog entry: the structured packet info (common name, variety, company, instructions), your extraction confidence score, and the packet photos are stored in our catalog so the next household to scan the same packet doesn't have to re-extract.
The catalog contribution is anonymous — it doesn't reveal who scanned the packet. Disable catalog contributions in Settings → Privacy if you'd rather your packets stay private to your household.
Household sharing
Inviting someone to your household via a one-time code shares your full inventory with them. Removing them from the household stops their access. Phase 1 doesn't support read-only roles — household members have equal write access. If you need finer permissions, sit tight until v1.1.
Children
Seedkeep is rated 4+ and contains no objectionable content. We do not knowingly collect data from children under 13. If you're a parent and discover your child has created a Seedkeep account, email taylor.finklea@gmail.com and we will delete the account and any associated inventory.
Data retention & deletion
Your inventory is stored as long as your account exists. You can delete individual seeds from within the app (soft-delete, hidden but recoverable for 30 days). To delete your entire account and all associated data, email taylor.finklea@gmail.com from the email address tied to your Apple ID. Account deletion is permanent and processed within 30 days.
Catalog contributions (anonymous packet entries) survive account deletion, because they were shared with the catalog at scan time and are no longer associated with you.
Where data lives
The Seedkeep server runs on Fly.io in the United States (region iad). The
Postgres database is hosted on Fly.io. Seed-packet photos are stored in Cloudflare R2. All
data in transit is TLS-encrypted; data at rest is encrypted by the storage providers.
Changes
If we ever change what we collect or how we use it, we'll update this page and bump the "Effective" date at the top. Material changes will also surface in the app via a one-time notice.
Contact
Questions, requests, or anything else: taylor.finklea@gmail.com